Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          6/HW3efg7hxtqc88Y3XCnTcN51zC3IO/zb6AFfTcpnE=
Subject key identifier:   89:3A:FF:C9:50:75:07:07:E0:55:10:07:56:F5:4A:22:D9:55:E9:BB
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       019D9A74EBB0331B0812C46321C649C3BCCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          18D9
Signing time:             Fri 17 Apr 2026 08:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:46 +0000
Files and hashes:         1: 75usjphnflTK9ekaeXTmIOUK9No.roa (hash: 6EuKwuh4YvgBCa5Zr1EQEmvX8bawaDXoEyNUirI2tqE=)
                          2: BYJeOMTp9VHrWuoMjPnGgfKwrc0.roa (hash: BFrY9/6iplAYN4CNa21BmE/m83H1ufk5TI5FpOMq62I=)
                          3: OhtO9gQuXsBPS-Q3O3FN8E4x348.roa (hash: o+Nr9wOEwTpH2Y6JMdDgtincCGDhZv31TNiZL0Hk3Bs=)
                          4: fEY123WrG17ZCUyz9dcKnTc2Qkc.roa (hash: ehi6sBGZP2OSU+JX6wLoNRrh9WIbrRaxXboak3XDqVc=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: 5KHd/bSGfHGVK5V0vPPXLwUDRdXkvTjvNeRX3pcw9Xs=)
                          6: xJFI4mrIs8uN5TlhHVLxpsA2hsU.roa (hash: 7LWb0I2IanjDr9ngdvZoV0Vpn7u1mnQr4dTehW6hxdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:eb:b0:33:1b:08:12:c4:63:21:c6:49:c3:bc:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Apr 17 08:00:46 2026 GMT
            Not After : Apr 18 08:00:46 2026 GMT
        Subject: CN=893affc950750707e055100756f54a22d955e9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:d3:cc:b0:f5:e2:77:41:55:b5:8a:60:2b:
                    c2:b8:d0:e2:d5:d8:48:bd:0a:a2:d8:ae:d8:ef:57:
                    58:6a:44:87:56:18:39:5c:f6:ab:8f:af:9e:8d:97:
                    9a:5c:a3:05:3b:4b:9c:b6:9b:68:68:d7:db:f0:f7:
                    0a:3d:1a:cb:80:a4:c7:23:41:df:8c:1a:4d:39:2e:
                    bc:9c:fb:a1:c4:cd:0c:dd:0b:20:a3:92:63:a7:36:
                    67:98:2a:4c:9b:90:9c:be:e3:1d:94:70:5e:25:f8:
                    4c:96:d7:b6:f3:81:02:e2:3d:c8:88:f4:9d:b6:88:
                    9f:bd:dc:97:2c:9d:16:7f:36:47:94:ba:c5:f6:cc:
                    7f:7b:c1:fb:91:6a:d3:95:37:e8:ef:4a:39:5b:9a:
                    8c:1c:fe:d9:8e:3f:21:21:4f:b6:25:cd:46:8d:6b:
                    a7:7f:9a:6c:e8:c2:ad:7c:94:d9:8e:0c:13:19:30:
                    52:a0:6c:85:a3:b9:c3:1a:11:e7:1a:4d:07:78:65:
                    b6:a0:be:ec:25:27:56:4e:1d:84:cf:d2:db:44:ce:
                    a5:2d:3c:97:fc:61:5e:0f:1c:76:5a:00:27:7e:2f:
                    0b:b1:c6:99:ea:68:dd:76:22:d1:9d:c9:55:15:73:
                    8e:72:f2:cf:9d:b1:0c:c9:00:54:7d:9c:68:7a:07:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3A:FF:C9:50:75:07:07:E0:55:10:07:56:F5:4A:22:D9:55:E9:BB
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:22:bb:40:7d:d1:dd:0a:5e:f7:d5:be:98:5e:3d:14:c6:
         72:ed:f1:6f:cb:1b:c4:a2:6e:d3:68:62:72:b2:8d:50:e6:8e:
         8b:ee:cd:bd:29:4b:7c:f4:e7:7f:bb:d8:12:3e:0c:7a:f7:7f:
         7c:9e:50:d7:56:2d:d4:42:dc:93:97:4b:40:10:ae:80:73:4d:
         42:f4:80:8e:97:ea:c1:33:88:4a:d4:7f:f9:3a:10:0b:03:3c:
         92:84:22:b3:a1:aa:ad:59:09:94:65:ed:92:ce:4e:61:fd:4d:
         13:1b:0b:53:96:3d:d8:c6:f7:7c:c8:32:63:aa:59:5e:01:14:
         dd:8d:90:69:65:c3:34:35:83:17:be:14:56:aa:6e:14:32:78:
         27:9e:d0:0e:13:0f:75:bf:cb:ed:5e:96:03:ab:f9:07:d4:a0:
         b5:7e:e6:4e:f7:48:08:b4:5d:4f:b8:6b:b0:f0:ef:50:83:bb:
         09:76:a2:04:60:91:c8:22:5a:e9:b4:7d:c4:1f:1a:c6:cf:d1:
         a2:83:4e:9f:2b:02:02:b8:78:81:01:d7:44:26:ed:c6:f2:2b:
         4a:98:0b:4e:4b:cd:ee:e3:b3:6a:94:0e:80:0b:01:a4:1a:bb:
         52:be:5d:18:96:18:4e:0d:2e:c5:db:01:76:a8:cd:6a:7d:4d:
         77:68:d1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:10 2026 by rpki-client